Under Communication A 6823, cash advances made abroad from local credit cards are limited to a maximum of 50 USD per transaction. Companies and individuals need to obtain prior clearance from the Central Bank before transferring funds abroad, including dividend payments or paying for services rendered to a company by foreign affiliates. Individuals do not need to obtain Central Bank approval if transfers are made from their foreign currency accounts in Argentina to their accounts abroad.

Decree No. 1,065/2024 introduced a USD 400 customs-duty de minimis threshold for non-commercial courier imports. Art. 1 provides that goods entering through the postal-service-provider or courier regime are exempt from import duty and the statistical fee up to an FOB value of USD 400 per shipment, subject to a maximum of five shipments per year and per person.

According to Art. 3 of Resolution No. 43/2019, procedures related to domain names take place through a special platform called TAD (Trámites a Distancia). To use the platforms, the residents must use their tax ID, while non-residents must obtain an identification number that is provided by the Network Information Center (NIC) Argentina (Art. 4). Users of this platform can appoint an agent who takes the necessary steps to register, renew and manage domain names on their behalf (Art. 5).

Consumer Protection Law No. 24240, together with numerous other legislative instruments, including the Digital Signature Law and Disposition No. 954/2025, establishes a comprehensive regulatory framework for consumer protection, which extends to transactions conducted in the online environment.

Argentina has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Argentina has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Argentina's law and jurisprudence. However, certain articles of the Argentine Civil Code and Intellectual Property Law are used as references for court cases and decisions. For example, in some cases, the courts have found that ISPs are only liable if they have acted with ‘malice or negligence’ (see Rodríguez v. Google in 2014). Courts have developed a series of tests in specific cases that provide some minimal protection.

Art. 3 of the "Regulation for the Collection of Personal Data and Identity Validation of Users of Mobile Services that Hold a Mobile Number" requires mobile communication service providers to establish a system for the nomination and verification of registered users’ identities, either in person or remotely, by the providers themselves or through authorised third parties, in accordance with the Regolution’s provisions governing registration. In addition, Art. 7 mandates that, for identity validation, whether conducted remotely or at customer service centres, providers must request the individual’s national identity card and gender and implement appropriate mechanisms to verify these details prior to activating the service.

Under Art. 4 of Resolution No. 909/1994, the importation for consumption of used goods listed in Annex II is temporarily prohibited. Annex II, as amended before its replacement in April 2025, included specified ICT goods, including telecommunications and network equipment, data-storage media, monitors and other display equipment, electronic components, including integrated circuits, insulated cables and optical-fibre products. Decree No. 273/2025 replaced Annex II with a revised list that retains specified ICT goods, including fixed and mobile telephone apparatus, smartphones, certain data-storage media, monitors and display equipment. Parts and pieces intended to be incorporated into goods whose importation is permitted are exempt, subject to the applicable customs declaration.

Section 2.2.6 of the Annex to Communication A 6354 of the Central Bank of Argentina (BCRA) delineates the data that must be retained within the national territory when financial institutions decentralise and outsource information technology services. Specifically, financial entities are required to store in the country the original accounting books and records, files containing the information provided, documents signed by clients, debtors' files and associated documents, as well as guarantees supporting the financing granted.

Under Art. 12 of the Personal Data Protection Law and Art. 12 of its implementing Regulations, Argentina prohibits the transfer of personal data to countries or international entities that do not guarantee an adequate level of protection. Exceptions apply in specific circumstances, including international judicial cooperation, healthcare purposes or anonymised data for epidemiological studies, financial transactions, compliance with international treaties, cooperation between intelligence agencies in combating organised crime and terrorism, and where the data subject has provided explicit consent. Art. 3 of Regulation No. 60-E/2016 provides a list of jurisdictions deemed adequate, which includes EU and EEA Member States, the UK (which was added to the list with an amendment in 2019), Switzerland, Guernsey, Jersey, the Isle of Man, the Faroe Islands, Canada (only for the private sector), Andorra, New Zealand, Uruguay, and Israel (only in relation to the data handled automatically). It is reported that, in 2025, Argentina formally recognised the United States as an adequate jurisdiction under Argentine law for the purposes of cross-border data transfers, including those involving personal data. Under Art. 1, for transfers to non-adequate jurisdictions, the standard contractual clauses approved by the "Agencia de Acceso a la Información Pública" (AAIP) must be implemented. Complementary regulations provide additional mechanisms for lawful transfers. Regulation No. 198/2023 recognises the Ibero-American Network’s standard contractual clauses as valid safeguards, while Regulation No. 159/2018 establishes requirements for binding corporate rules (BCRs) applicable to intra-group transfers to non-adequate jurisdictions.

Argentina has joined agreements with binding commitments to open transfers of data across borders. According to the Art. 11.6 of the Trade Agreement between the Argentine Republic and the Republic of Chile, the Parties recognise that each Party may have its own regulatory requirements on the transfer of information by electronic means. Each Party shall permit the cross-border transfer of information by electronic means, where such activity is for the conduct of the business of a person of a Party. The Parties may establish restrictions on the cross-border transfer of information by electronic means to achieve a legitimate public policy objective, provided that the measure is not applied in a manner that would constitute a means of arbitrary or unjustifiable discrimination or a disguised restriction on trade.
In addition, Art. 7.2 of the Mercosur Agreement on Electronic Commerce stipulates that each Member State shall permit the cross-border transfer of information through electronic means, provided that such transfer is undertaken for the purpose of carrying out the commercial activities of a person or entity belonging to a Member State.

The Personal Data Protection Act, together with Decree No. 1558/2001, establishes a comprehensive framework for data protection in Argentina. This legislative regime applies to both public and private entities and governs processing activities conducted within Argentine territory. The Act delineates lawful bases for processing, including consent and contractual arrangements with data subjects. Also, it imposes specific obligations on controllers and processors, such as breach notification requirements and the mandatory registration of databases with the National Registry of Personal Databases, administered by the Argentine data protection authority (AAIP). The AAIP functions as the supervisory authority under the Act and demonstrates considerable regulatory activity, frequently issuing resolutions that interpret the legislation and provide compliance guidance.

Page 5 of the Guide on Data Protection Impact Assessments provides that it is a mandatory requirement for both controllers and processors to undertake a data protection impact assessment.

A basic legal framework on intermediary liability for copyright infringement is absent in Argentina's law and jurisprudence. However, certain Argentine Civil Code and Intellectual Property Law articles are used as references for court cases and decisions. For example, in some cases the courts have found that ISPs are only liable if they have acted with ‘malice or negligence’ (see Rodríguez v. Google in 2014). Courts have developed a series of tests in specific cases that provide some minimal protection.